github_mirrors/attachment
3
0
Fork 1
mirror of https://github.com/openappsec/attachment.git synced 2025-12-31 05:39:07 +03:00
Code Issues Packages Projects Releases Wiki Activity

try content-length nil

Browse Source
This commit is contained in:
wiaamm
2025-12-14 15:46:57 +02:00
parent 165a01a2ea
commit adf2564db7
1 changed files with 3 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
attachments/kong/plugins/open-appsec-waf-kong-plugin/handler.lua
View File

@@ -140,8 +140,6 @@ end
function NanoHandler.header_filter(conf) function NanoHandler.header_filter(conf)
local ctx = kong.ctx.plugin local ctx = kong.ctx.plugin
kong.log.err("-------------------- header_filter -------------------")
kong.response.exit(403, "Blocked by Open AppSec WAF Kong Plugin", { ["Content-Type"] = "text/plain" })
if nano.is_session_finalized(ctx.session_data) then if nano.is_session_finalized(ctx.session_data) then
kong.log.debug("Session has already been inspected, no need for further inspection") kong.log.debug("Session has already been inspected, no need for further inspection")
return return
@@ -171,11 +169,10 @@ function NanoHandler.header_filter(conf)
if verdict ~= nano.AttachmentVerdict.INSPECT then if verdict ~= nano.AttachmentVerdict.INSPECT then
ctx.cleanup_needed = true ctx.cleanup_needed = true
if verdict == nano.AttachmentVerdict.DROP then if verdict == nano.AttachmentVerdict.DROP then
kong.log.warn("DROP verdict in header_filter - sending block response immediately") kong.log.debug("DROP verdict in header_filter - sending block response immediately")
return nano.handle_custom_response(session_data, response) return nano.handle_custom_response(session_data, response)
else
ngx.header["Content-Length"] = nil
end end
ngx.header["Content-Length"] = nil
return return
end end
@@ -188,7 +185,7 @@ function NanoHandler.body_filter(conf)
local ctx = kong.ctx.plugin local ctx = kong.ctx.plugin
local chunk = ngx.arg[1] local chunk = ngx.arg[1]
local eof = ngx.arg[2] local eof = ngx.arg[2]
kong.response.exit(403, "2Blocked by Open AppSec WAF Kong Plugin", { ["Content-Type"] = "text/plain" })
local session_id = ctx.session_id local session_id = ctx.session_id
local session_data = ctx.session_data local session_data = ctx.session_data